Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: vpnc: devel

Problem with VPN concentrator at hs-mannheim

 

 

vpnc devel RSS feed   Index | Next | Previous | View Threaded


michael+vpnc at stapelberg

Mar 5, 2009, 11:48 PM

Post #1 of 1 (922 views)
Permalink
Problem with VPN concentrator at hs-mannheim

Hi,

A friend of mine is having problems to use vpnc to connect to his university
since they've changed to use certificate based authentification only.

The version used is latest SVN (from today). Of course, it has been built
with certificate support enabled and the appropriate root certificate has been
installed. The clock is working correctly on his computer and vpnc says
"Match", so I think there's nothing wrong with the certificate itself.

On Windows Vista with the proprietary VPN client, everything works.

A strange issue is that when coming from the network of another university
which cooperates with his, everything works. Maybe they configured a part of
the authentication scheme to assume "good clients" when coming from specific
networks? However, in Windows Vista, connecting works from everywhere!

Configuration looks like this (passwords obfuscated):
IPSec ID hsma
IPSec gatway vpn.hs-mannheim.de
IPSec secret OBFUSCATED

IKE Authmode hybrid
XAuth username OBFUSCATED
XAuth password OBFUSCATED

You can find some information about the VPN access in german on
http://www.rz.hs-mannheim.de/index.php?option=com_content&view=article&id=162&Itemid=246#Mobil

I've attached the output of vpnc --debug=3 in working (connecting from
"trusted network") and non-working state. non-working means that no traffic is
routed through the VPN at all.

Do you have any idea what the problem could be? Is this a known bug? How can
we debug any further?

Best regards,
Michael
Attachments: vpnc-broken (116 KB)
  vpnc-working (160 KB)

vpnc devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.